279 matches found
PT-2020-10213
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Event Notices Settings of Web File Manager. This allows an attacker to create or update event notices via the "RAPR/EventNoticesSet.html" endpoint. Recommendations For Rumpus FT...
PT-2020-10210
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Folder Sets Settings of Web File Manager. This allows an attacker to create or delete folders after exploiting it at the "RAPR/FolderSetsSet.html" endpoint. Recommendations For...
PT-2020-10217
Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A HTTP Response Splitting issue was identified in the Web Settings Component of Web File Manager. This can be exploited to achieve stored XSS or website defacement by manipulating the ExtraHTTPHead...
PT-2020-10208
Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A Cookie based reflected XSS issue exists in the Web File Manager, related to RumpusLoginUserName and snp. Recommendations For Rumpus FTP Server version 8.2.9.1, consider restricting access to the...
PT-2020-10214
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Block Clients component of Web File Manager that could allow an attacker to modify IP address settings, specifically to whitelist or block any IP address, by accessing the...
PT-2020-10206
Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A CSRF issue exists in the Web File Manager's Edit Accounts functionality. This allows an attacker to take over a user account by changing the password, update users' details, and escalate privileg...
CVE-2019-19664: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server Web settings at RAPR/WebSettingsGeneralSet.html...
PT-2020-10212
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the FTP Settings of Web File Manager. This can be exploited to manipulate Server FTP settings at the "RAPR/FTPSettingsSet.html" endpoint. Recommendations For version 8.2.9.1, as a...
Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Vulnerability
Exploit for asp platform in category web applications Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Exploit Author: Harshit Shukla, Sudeepto Roy Vendor Homepage:...
Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting
Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Date: 2019-12-14 Exploit Author: Harshit Shukla, Sudeepto R...
Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting
Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Date: 2019-12-14 Exploit Author: Harshit Shukla, Sudeepto Roy Vendor Homepage: https://www.maxum.com/ Tested On: Windows & Mac...
Rumpus FTP Web File Manager Cross-Site Scripting Vulnerability
Rumpus FTP Web File Manager is a file transfer server. A cross-site scripting vulnerability exists in the login page in Rumpus FTP Web File Manager version 8.2.9.1. The vulnerability stems from a lack of proper validation of client data by the web application. An attacker can exploit this...
CVE-2019-19368
A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts...
CVE-2019-19368
A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts...
CVE-2019-19368
Rumpus FTP Web File Manager 8.2.9.1 is affected by a reflected Cross‑Site Scripting vulnerability on the Login page. An attacker can entice a user to click a crafted link, enabling execution of arbitrary JavaScript in the victim’s browser (potential session hijacking/defacement or data theft). Ro...
CVE-2019-19368
A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts...
CVE-2019-19368: Improper Neutralization of Input During Web Page Generation
A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts...
PT-2019-15822
Name of the Vulnerable Software and Affected Versions Rumpus FTP Web File Manager version 8.2.9.1 Description A Reflected Cross Site Scripting issue was found in the Login page, allowing an attacker to execute arbitrary Javascripts by sending a crafted link to end users. Recommendations For Rumpu...
